$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a846b54d-f778-38fa-aff7-24dda6cea45d.roa File: a846b54d-f778-38fa-aff7-24dda6cea45d.roa (raw, json) Hash identifier: C5q2qYKKajnfidt9r1peD8FBZJtXQFyt6zixy3KfsDA= Subject key identifier: BD:13:24:A2:F6:C5:57:FC:41:8A:DB:79:0C:1D:E3:CE:A3:A1:49:5D Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584949FE8EEFC445988CD8334480 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a846b54d-f778-38fa-aff7-24dda6cea45d.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 13414 IP address blocks: 64.63.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8e:ef:c4:45:98:8c:d8:33:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=d30beabb-2f00-4c3f-8a4b-6dde4c498ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:ef:58:f7:b8:0d:85:f6:4d:1a:5a:c9:ba: eb:57:66:04:50:2f:49:e4:17:da:57:48:39:70:9c: 6b:17:43:82:26:11:59:1a:42:a6:f6:68:f9:f4:1f: 7b:b5:a5:cd:b8:d9:58:82:1a:7a:d3:4f:ed:99:11: c4:7d:db:fb:c3:58:5b:69:fa:17:be:95:7d:37:ee: 75:b9:31:0b:9c:39:d7:5d:44:a6:30:98:f8:67:db: b3:b2:dd:b1:f4:e1:f3:fd:c4:8d:f5:74:c2:cf:7e: 19:38:73:5e:58:85:c7:15:3b:d6:66:cb:ac:b8:30: 6c:69:50:e4:ac:9a:41:35:d5:72:c0:98:9b:8c:68: db:38:17:66:f4:7e:45:e8:9a:b1:3d:75:b8:35:55: ca:0d:33:60:d2:dc:fd:bc:15:3f:ac:2f:ba:05:fe: 6f:a0:bd:fe:0e:a1:ec:7d:51:ed:58:87:f5:a0:1c: 5b:1d:a5:6c:da:da:d0:c1:14:65:92:f1:b1:0a:ca: 66:bf:79:3b:b8:3f:4b:3f:ab:62:84:1f:cf:45:d4: 6e:a1:2c:95:24:26:f3:22:3f:e5:22:e1:af:87:62: ac:8c:a6:e1:49:a0:25:fc:8f:3d:f0:9a:08:c5:47: 65:3f:b5:1f:c4:83:50:7f:3a:5e:3b:84:62:f3:64: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:13:24:A2:F6:C5:57:FC:41:8A:DB:79:0C:1D:E3:CE:A3:A1:49:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a846b54d-f778-38fa-aff7-24dda6cea45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:88:e1:a4:79:53:c7:8f:51:eb:45:9d:cf:0e:84:be:d4:57: 3f:52:97:b0:04:e3:85:e5:2e:3d:71:98:84:b3:12:05:5b:e6: 8a:7d:c7:e8:8d:fb:4e:db:ab:d0:30:34:29:4e:8d:94:d8:ee: 79:5e:81:bf:3e:36:21:a7:05:1c:2a:86:df:12:6e:4f:0c:b0: 7b:48:5b:9e:35:ff:cc:63:b4:44:9c:16:dc:ee:4f:c5:97:75: ad:15:03:cc:fd:9a:16:25:23:31:5e:f1:73:a6:92:9b:f5:6a: 77:9e:c4:16:49:96:6c:bb:78:43:49:0d:40:a9:b9:66:f5:2b: 17:52:2e:27:ab:6a:ce:d7:88:d4:44:dd:39:58:11:79:db:52: 36:f3:57:32:1c:7f:20:d2:0c:ef:f6:3b:70:5f:a5:b4:2a:46: 92:ce:4d:1f:7c:5a:ed:ab:51:af:ad:80:82:7a:5c:48:85:d8: 66:09:28:29:5f:6f:73:60:32:50:7d:1b:1c:1d:bc:df:b1:9e: d6:98:be:a0:57:f3:f0:3f:1a:2b:f5:59:0b:d6:c3:68:1e:07: 44:66:aa:fc:6a:20:75:66:cc:4f:3e:60:d3:96:2a:51:70:61: 68:ee:48:d0:8e:3c:59:f4:cf:c4:0b:2f:e9:d5:2d:7b:5d:e7: 67:98:bf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/o7vxEWYjNgzRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZDMwYmVhYmItMmYwMC00YzNmLThhNGItNmRkZTRjNDk4ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPLvWPe4DYX2TRpaybrrV2YEUC9J5BfaV0g5 cJxrF0OCJhFZGkKm9mj59B97taXNuNlYghp600/tmRHEfdv7w1hbafoXvpV9N+51 uTELnDnXXUSmMJj4Z9uzst2x9OHz/cSN9XTCz34ZOHNeWIXHFTvWZsusuDBsaVDk rJpBNdVywJibjGjbOBdm9H5F6JqxPXW4NVXKDTNg0tz9vBU/rC+6Bf5voL3+DqHs fVHtWIf1oBxbHaVs2trQwRRlkvGxCspmv3k7uD9LP6tihB/PRdRuoSyVJCbzIj/l IuGvh2KsjKbhSaAl/I898JoIxUdlP7UfxINQfzpeO4Ri82TumQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0TJKL2xVf8QYrbeQwd486joUldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYTg0NmI1NGQtZjc3OC0z OGZhLWFmZjctMjRkZGE2Y2VhNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaI4aR5U8ePUetFnc8OhL7UVz9Sl7AE44XlLj1xmISzEgVb5op9x+iN +07bq9AwNClOjZTY7nlegb8+NiGnBRwqht8Sbk8MsHtIW541/8xjtEScFtzuT8WX da0VA8z9mhYlIzFe8XOmkpv1aneexBZJlmy7eENJDUCpuWb1KxdSLieras7XiNRE 3TlYEXnbUjbzVzIcfyDSDO/2O3BfpbQqRpLOTR98Wu2rUa+tgIJ6XEiF2GYJKClf b3NgMlB9GxwdvN+xntaYvqBX8/A/Giv1WQvWw2geB0RmqvxqIHVmzE8+YNOWKlFw YWjuSNCOPFn0z8QLL+nVLXtd52eYv6w= -----END CERTIFICATE-----Generated at Sat Apr 5 05:17:28 2025 by rpki-client